Cloud Security Alliance Cloud Security Alliance Certifications CCSK Questions & Answers

• Question 71:

  How does running applications on distinct virtual networks and only connecting networks as needed help?

  A. It reduces hardware costs

  B. It provides dynamic and granular policies with less management overhead

  C. It locks down access and provides stronger data security

  D. It reduces the blast radius of a compromised system

  E. It enables you to configure applications around business groups

  Correct Answer: D

• Question 72:

  Sending data to a provider's storage over an API is likely as much more reliable and secure than setting up your own SFTP server on a VM in the same provider

  A. False

  B. True

  Correct Answer: B

• Question 73:

  What is true of searching data across cloud environments?

  A. You might not have the ability or administrative rights to search or access all hosted data.

  B. The cloud provider must conduct the search with the full administrative controls.

  C. All cloud-hosted email accounts are easily searchable.

  D. Search and discovery time is always factored into a contract between the consumer and provider.

  E. You can easily search across your environment using any E-Discovery tool.

  Correct Answer: A

• Question 74:

  How does virtualized storage help avoid data loss if a drive fails?

  A. Multiple copies in different locations

  B. Drives are backed up, swapped, and archived constantly

  C. Full back ups weekly

  D. Data loss is unavoidable with drive failures

  E. Incremental backups daily

  Correct Answer: A

• Question 75:

  What is the newer application development methodology and philosophy focused on automation of application development and deployment?

  A. Agile

  B. BusOps

  C. DevOps

  D. SecDevOps

  E. Scrum

  Correct Answer: C

• Question 76:

  To understand their compliance alignments and gaps with a cloud provider, what must cloud customers rely on?

  A. Provider documentation

  B. Provider run audits and reports

  C. Third-party attestations

  D. Provider and consumer contracts

  E. EDiscovery tools

  Correct Answer: C

• Question 77:

  Which of the following is a perceived advantage or disadvantage of managing enterprise risk for cloud deployments?

  A. More physical control over assets and processes.

  B. Greater reliance on contracts, audits, and assessments due to lack of visibility or management.

  C. Decreased requirement for proactive management of relationship and adherence to contracts.

  D. Increased need, but reduction in costs, for managing risks accepted by the cloud provider.

  E. None of the above.

  Correct Answer: B

• Question 78:

  Which data security control is the LEAST likely to be assigned to an IaaS provider?

  A. Application logic

  B. Access controls

  C. Encryption solutions

  D. Physical destruction

  E. Asset management and tracking

  Correct Answer: A

• Question 79:

  Use elastic servers when possible and move workloads to new instances.

  A. False

  B. True

  Correct Answer: A

• Question 80:

  What item below allows disparate directory services and independent security domains to be interconnected?

  A. Coalition

  B. Cloud

  C. Intersection

  D. Union

  E. Federation

  Correct Answer: E